Andrew S. Townley, Managing Director of Archistry Limited, announced today he would be presenting at the third annual OASIS Adoption Forum to be held on November 27-29 at London's Hilton Kensington. Mr. Townley will be presenting information on how to decide an approach to implementing Federated Identity Management.
Mr. Townley's presentation abstract is quoted below.
Balancing the principles of loose coupling and strong identity policies within an SOA is a delicate problem. Like any other problem in software engineering, the final solution involves weighing a number of trade-offs against their ultimate effects to determine the optimal choice to deliver on the system's business goals. Specifications like SAML provide various ways to share identity assertion information between parties within an SOA environment, but the real questions are not related to the mechanism to be used, but how much federation do you really need and what identity information really needs to be federated in an environment.
This presentation looks at two main approaches to answering this question: "full" federation of requester identity information between entities in an SOA as well as a federation model built on a chain of trust relationships between the service requester and ultimate service provider. Each has strengths and weaknesses that can dramatically affect the design and relative complexity of your SOA solution. Each of these approaches is briefly explained and explored in the context of providing a shared security context between the requester and provider. Key factors for choosing each solution are highlighted from both a governance and technology perspective to provide guidance to the SOA architect in choosing an approach to meet their needs.
Mr. Townley will also briefly discuss some of the coming identity management challenges around dynamic collaboration. Dynamic collaboration is something that Archistry believes is relevant to the consumer market through ubiquitous computing, but it is also something particularly relevant to allowing IT to more quickly respond to changes in an organization's business relationships in the enterprise IT environment. Mr. Townley will be in attendance for the full conference.
With increasing threats encompassing everything from hacking to identity theft, providing a secure, online environment has become a major objective for governments and organisations worldwide. Focusing on these very real, modern-day treats will be the theme of the third annual event. The OASIS Adoption Forum brings together users, government agencies, researchers and developers from the international community to discover how open standards for security are being implemented and what the future holds in this area. This year's sessions will cover sensitive key areas such as identity management, access control, authentication in e-Government, SOA and security, and security in Web services. There will also be a special workshop on 'The State and Future of PKI'.
Archistry Limited is a professional services firm based in Dublin, Ireland that focuses on helping clients deliver improved business performance and productivity through effective utilization of technology. Archistry's service offerings include enterprise IT governance, SOA planning and implementation guidance, information assurance and optimization and improvement of IT implementations. More information about Archistry Limited is available on the Web at www.archistry.com.
Copyright 2006, Archistry Limited. All Rights Reserved.
Archistry Limited 33 Pearse Street Suite 115 Dublin, 2 Ireland
Phone +353 1 282 4880 Fax +353 1 282 6291